summaryrefslogtreecommitdiff
path: root/myproposal.h
diff options
context:
space:
mode:
Diffstat (limited to 'myproposal.h')
-rw-r--r--myproposal.h17
1 files changed, 9 insertions, 8 deletions
diff --git a/myproposal.h b/myproposal.h
index 276108bf6..4e913e3ce 100644
--- a/myproposal.h
+++ b/myproposal.h
@@ -26,6 +26,8 @@
26 26
27#include <openssl/opensslv.h> 27#include <openssl/opensslv.h>
28 28
29/* conditional algorithm support */
30
29#ifdef OPENSSL_HAS_ECC 31#ifdef OPENSSL_HAS_ECC
30# define KEX_ECDH_METHODS \ 32# define KEX_ECDH_METHODS \
31 "ecdh-sha2-nistp256," \ 33 "ecdh-sha2-nistp256," \
@@ -52,12 +54,15 @@
52# define AESGCM_CIPHER_MODES 54# define AESGCM_CIPHER_MODES
53#endif 55#endif
54 56
55/* Old OpenSSL doesn't support what we need for DHGEX-sha256 */
56#ifdef HAVE_EVP_SHA256 57#ifdef HAVE_EVP_SHA256
57# define KEX_SHA256_METHODS \ 58# define KEX_SHA256_METHODS \
58 "diffie-hellman-group-exchange-sha256," 59 "diffie-hellman-group-exchange-sha256,"
60#define SHA2_HMAC_MODES \
61 "hmac-sha2-256," \
62 "hmac-sha2-512,"
59#else 63#else
60# define KEX_SHA256_METHODS 64# define KEX_SHA256_METHODS
65# define SHA2_HMAC_MODES
61#endif 66#endif
62 67
63# define KEX_DEFAULT_KEX \ 68# define KEX_DEFAULT_KEX \
@@ -77,19 +82,15 @@
77 "ssh-rsa," \ 82 "ssh-rsa," \
78 "ssh-dss" 83 "ssh-dss"
79 84
85/* the actual algorithms */
86
80#define KEX_DEFAULT_ENCRYPT \ 87#define KEX_DEFAULT_ENCRYPT \
81 "aes128-ctr,aes192-ctr,aes256-ctr," \ 88 "aes128-ctr,aes192-ctr,aes256-ctr," \
82 "arcfour256,arcfour128," \ 89 "arcfour256,arcfour128," \
83 AESGCM_CIPHER_MODES \ 90 AESGCM_CIPHER_MODES \
84 "aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \ 91 "aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \
85 "aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se" 92 "aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se"
86#ifdef HAVE_EVP_SHA256 93
87#define SHA2_HMAC_MODES \
88 "hmac-sha2-256," \
89 "hmac-sha2-512,"
90#else
91# define SHA2_HMAC_MODES
92#endif
93#define KEX_DEFAULT_MAC \ 94#define KEX_DEFAULT_MAC \
94 "hmac-md5-etm@openssh.com," \ 95 "hmac-md5-etm@openssh.com," \
95 "hmac-sha1-etm@openssh.com," \ 96 "hmac-sha1-etm@openssh.com," \